Read the docs
TI-2016-05048 Aliases CVE-2016-5819GHSA-jw53-g5p8-77fr

Cross-site scripting in Moxa OnCell G3100V2 Series

Priority LOW 29CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Version 1.7 allows a reflected cross-site scripting attack which may allow an attacker to execute arbitrary script code in the user’s browser within the trust relationship between their browser and the server.

Why it matters now

EPSS 0.00886 59th percentileScored 2026-11-07
Fix Fixed OnCell G3100V2 Series (Moxa): 2.8OnCell G3111/G3151/G3211/G3251 Series (Moxa): 1.7

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
MoxaOnCell G3100V2 Seriesbefore 2.82.8Patch availableCNA
MoxaOnCell G3111/G3151/G3211/G3251 Seriesbefore 1.71.7Patch availableCNA
  • OnCell G3100V2 Series VendorMoxa Affected before 2.8 Fixed in 2.8 Patch available CNA
  • OnCell G3111/G3151/G3211/G3251 Series VendorMoxa Affected before 1.7 Fixed in 1.7 Patch available CNA

CPE configurations NVD · 10

CPEVersionsRoleVendor
cpe:2.3:o:moxa:oncell_g3100v2_firmware:*:*:*:*:*:*:*:*before 2.8VulnerableMoxa
cpe:2.3:h:moxa:oncell_g3100v2:-:*:*:*:*:*:*:*not specified by NVDRunning onMoxa
cpe:2.3:o:moxa:oncell_g3111_firmware:*:*:*:*:*:*:*:*before 1.7VulnerableMoxa
cpe:2.3:h:moxa:oncell_g3111:-:*:*:*:*:*:*:*not specified by NVDRunning onMoxa
cpe:2.3:o:moxa:oncell_g3151_firmware:*:*:*:*:*:*:*:*before 1.7VulnerableMoxa
cpe:2.3:h:moxa:oncell_g3151:-:*:*:*:*:*:*:*not specified by NVDRunning onMoxa
cpe:2.3:o:moxa:oncell_g3211_firmware:*:*:*:*:*:*:*:*before 1.7VulnerableMoxa
cpe:2.3:h:moxa:oncell_g3211:-:*:*:*:*:*:*:*not specified by NVDRunning onMoxa
cpe:2.3:o:moxa:oncell_g3251_firmware:*:*:*:*:*:*:*:*before 1.7VulnerableMoxa
cpe:2.3:h:moxa:oncell_g3251:-:*:*:*:*:*:*:*not specified by NVDRunning onMoxa
  • cpe:2.3:o:moxa:oncell_g3100v2_firmware:*:*:*:*:*:*:*:* Versions before 2.8 Vulnerable ·Moxa
  • cpe:2.3:h:moxa:oncell_g3100v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
  • cpe:2.3:o:moxa:oncell_g3111_firmware:*:*:*:*:*:*:*:* Versions before 1.7 Vulnerable ·Moxa
  • cpe:2.3:h:moxa:oncell_g3111:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
  • cpe:2.3:o:moxa:oncell_g3151_firmware:*:*:*:*:*:*:*:* Versions before 1.7 Vulnerable ·Moxa
  • cpe:2.3:h:moxa:oncell_g3151:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
  • cpe:2.3:o:moxa:oncell_g3211_firmware:*:*:*:*:*:*:*:* Versions before 1.7 Vulnerable ·Moxa
  • cpe:2.3:h:moxa:oncell_g3211:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
  • cpe:2.3:o:moxa:oncell_g3251_firmware:*:*:*:*:*:*:*:* Versions before 1.7 Vulnerable ·Moxa
  • cpe:2.3:h:moxa:oncell_g3251:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa

Remediation

  • Fix · CNA OnCell G3100V2 Series (Moxa) Fixed in 2.8
  • Fix · CNA OnCell G3111/G3151/G3211/G3251 Series (Moxa) Fixed in 1.7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-5819
  2. 2026-10-03 Alias added: GHSA-jw53-g5p8-77fr

References

Advisory 1

  • TI-2016-05030 Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before… CVSS 3.0CRITICAL 9.8
  • TI-2016-05041 Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before… CVSS 3.0LOW 3.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences